Lucene search
GoogleOSV:CVE-2023-3627HistoryJul 11, 2023 - 5:15 p.m.
CVE-2023-3627
2023-07-1117:15:13
Google
osv.dev
4
cve-2023-3627 cross-site request forgery software github repository salesagility/suitecrm-core
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
44.9%
Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
Related
prion
prion
Cross site request forgery (csrf)
2023-07-11 17:15:00
nvd
nvd
CVE-2023-3627
2023-07-11 17:15:13
osv
osv
BIT-suitecrm-2023-3627
2024-03-06 11:07:27
cvelist
cvelist
huntr
huntr
CSRF on /api/graphql query executing the mutations through GET requests
2023-06-03 20:39:42
cve
cve
CVE-2023-3627
2023-07-11 17:15:13
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
44.9%
Related for OSV:CVE-2023-3627